Kraken is based in SF and has various US regulatory attachments and thus auditing obligations. It is specifically not an offshore operation. It’s also been around for a long time.
Among crypto exchanges Kraken is definitely on the legitimate side of the spectrum.
Somebody should create a kind of credit rating for exchanges to rate their risk and legitimacy.